General
- Target DOC-R4JDH3.zip
- Size 587B
- Sample260803-qv7z2scl4y
- SHA256 5b86ab9a8de77b91a8e185718acaa5ef22ea8daa33c79b8c448a6eed971cb60c
- MD5 82b1a2775c519a5e8e6d93570de83a44
- SHA1 5141e3017be2a18c773888716e544c2922a8ee85
- SHA512 ca152bca68129d27b2c81aa0a0145352182117d31252cb21474ff0fc52d09089d479741d2934bdc2a48cab726a27d6e35895bbc5a575f2633e4c7c29eeb099d9
- TLSH T1C6F0E1BA21154F24C98A9A75222522C9452074091AECFE2E1573F10D49881473E5F2F2
- MD5 SHA1 SHA512 TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
DOC-R4JDH3.lnk
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
DOC-R4JDH3.lnk
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://bro-pdffiller.lat/h/estagio1.php?r=360761F15794
Targets
-
- Target DOC-R4JDH3.lnk
- Size 1KB
- SHA256 abc96a08cfd7508f9e23483ca0167587530ed136057bb9caa15d0478241aa030
- MD5 57a027821c543e2b3e31842646aee962
- SHA1 cd8c85c4225b1b94e02916e7dd414a8843ee2d4f
- SHA512 bab76a992ad22b90478ac89c155d648641e7048aec871b59aec103db37859224b65066772604aff75f5bc606b116a99d04bbe0dcaa810a887c735a35ebd5cc76
- TLSH T1DA3197103FF90614F3F79E73A8BB6B1484BBB9668E21C62D0040460C1032A04E17AF67
- MD5 SHA1 SHA512 TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.